Privacy policy

Last updated: 12 October 2026

This policy explains what personal information WebsiteAdmin collects, why we collect it, who we share it with and the rights you have over it. We’ve tried to keep it in plain English.

Who we are

WebsiteAdmin is a trading name of Riverforge Ltd, a company registered in England and Wales (company number 16827982). Our registered office, which is a postal address only, is 3rd Floor, 86-90 Paul Street, London EC2A 4NE. We’re based in Reading, Berkshire.

Riverforge Ltd is the controller of the personal information described in this policy and is registered with the Information Commissioner’s Office (ICO) under registration number ZC166073.

If you have any questions about this policy or your information, email hello@websiteadmin.co.uk or call 0118 242 2555.

The information we collect and why

When you get in touch

If you fill in our contact form, email us or call us, we collect the details you give us. On the contact form that’s your name, email address, phone number, website address and your message. We use this to reply to you and to give you the information or quote you asked for.

Lawful basis: our legitimate interest in responding to enquiries, or taking steps at your request before entering into a contract.

When you become a client

• Your name, business name and contact details.
• Billing information. Card payments are handled by Stripe; we never see or store your full card number.
• Records of the support requests you send us and the work we do.
• Access details for your website, hosting or domain that you give us so we can do the work.

We only use access details to work on your site. Where we can, we use our own named administrator account on your site rather than your login, so you never need to share your password, and we remove our access when we stop working together.

Lawful basis: performing our contract with you, and our legal obligation to keep financial records.

When we work on your website

While maintaining your website we may be able to see personal information stored on it, such as customer orders, form submissions or user accounts. For that information you are the controller and we act as your processor. How we handle it is set out in the data protection section of our Terms of Service.

When you comment on our blog

If you leave a comment, we collect the name, email address and website you enter, your comment, and your IP address and browser details to help detect spam. Your name, website and comment are shown publicly. An anonymised string created from your email address (a hash) may be sent to the Gravatar service to see whether you use it; if you do, your Gravatar profile picture is shown next to your comment.

Lawful basis: our legitimate interest in running a blog and keeping it free of spam.

When you browse our website

• Server and security logs. Our web host records technical information such as your IP address, browser type, the pages you request and the time. Our security software also records the IP addresses of failed login attempts so it can block attacks. We use these to keep the site secure and working. Lawful basis: legitimate interests.
• Your cookie choices. When you make a choice in our cookie banner we keep a record of it: a random consent ID, the choice you made, the date and time, your country, your browser details and an anonymised version of your IP address. This lets us show that we asked for and respected your consent. Lawful basis: legal obligation and legitimate interests.
• Analytics and advertising, only if you agree. With your consent we use Google Analytics 4 and Microsoft Clarity to understand how people use the site, and Google Ads, Meta Pixel and LinkedIn Insight Tag to measure our advertising. These are loaded through Google Tag Manager. Microsoft Clarity records how you interact with pages, such as clicks, scrolling and mouse movement, and can replay a visit; by default it hides the text you type into form fields. Lawful basis: consent.
• Fonts. Our pages use fonts from Google Fonts, so your browser connects to Google’s servers to download them, which shares your IP address with Google. Lawful basis: legitimate interests.

If you don’t accept analytics or advertising cookies, Google’s tags run in a restricted mode: they don’t set cookies, and may only send limited signals that don’t identify you, such as the fact that a page was viewed.

Cookies

Cookies are small files stored by your browser. We only use cookies that aren’t strictly necessary if you agree to them in our cookie banner, and you can change your mind at any time using the cookie settings button shown on every page.

Analytics cookies are only set if you accept analytics cookies, and advertising cookies only if you accept marketing cookies.

Who we share information with

We don’t sell personal information. We share it only with service providers who help us run the business, and only as much as they need:

• Namecheap, Inc.: hosts this website and our email.
• SiteGround: hosts client websites on our managed hosting add-on.
• Stripe: takes card payments.
• Google: Analytics, Ads, Tag Manager and Fonts.
• Microsoft: Clarity.
• Meta: Meta Pixel.
• LinkedIn: LinkedIn Insight Tag.

We may also share information with professional advisers such as our accountant, or where the law requires it, for example with HMRC.

Transfers outside the UK

This website and our email are hosted on servers in the USA, and some of the providers above process information in the USA or elsewhere. When personal information leaves the UK we make sure it is protected, either because the destination has a UK adequacy decision (for US companies, certification under the UK Extension to the EU-US Data Privacy Framework) or by using the ICO’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep information

• Enquiries that don’t lead to work: up to 12 months after we last spoke.
• Client records, contracts and invoices: 6 years after the end of the financial year in which our work ends, as tax law requires.
• Access details for your website or hosting: deleted, and our access removed, when we stop working on your site.
• Blog comments: until the comment is removed.
• Google Analytics data: no longer than 14 months.
• Cookie consent records: for as long as we need to be able to show your consent.
• Server logs: kept by our host for a short period for security and troubleshooting.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that’s wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it, or object to us using it;
• ask for information you gave us in a portable format;
• withdraw your consent at any time, where we rely on consent (for cookies, use the cookie settings button).

To use any of these rights, email hello@websiteadmin.co.uk. It’s free, and we’ll reply within one month. Some rights have legal limits; for example, we must keep invoices for 6 years.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Keeping information secure

We use HTTPS across this website, keep our systems and software up to date, and limit access to personal information to what’s needed to do the work.

Marketing emails

We don’t currently send a newsletter. If we start one, we’ll only email you if you’ve asked us to or you’re a client and haven’t opted out, and every email will include an unsubscribe link.

Children

Our services are for businesses and our website isn’t aimed at children.

Changes to this policy

We’ll update this page if the way we handle personal information changes, and change the date at the top. If a change significantly affects clients, we’ll also tell them by email.

Contact

Riverforge Ltd t/a WebsiteAdmin, Reading, Berkshire.
Email: hello@websiteadmin.co.uk
Phone: 0118 242 2555
Registered office (postal address only): 3rd Floor, 86-90 Paul Street, London EC2A 4NE.